Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f99671a2-1fd5-3c5c-9b69-6357cdd44a3f.roa
File:                     f99671a2-1fd5-3c5c-9b69-6357cdd44a3f.roa (raw, json)
Hash identifier:          bCVdllWj+FFkylhAe/EFr81OPQBl8kCT1x16fq/szos=
Subject key identifier:   75:4C:C0:09:D4:D3:9D:87:94:E7:04:A6:10:3B:54:4F:FE:0F:4F:1C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAF5DE89DD872790647F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f99671a2-1fd5-3c5c-9b69-6357cdd44a3f.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396546
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:f5:de:89:dd:87:27:90:64:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=ad1718b1-e79a-43de-925d-b4cbf455b3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:34:06:a2:3f:77:1e:ff:85:21:9f:2f:33:0d:
                    2c:87:61:7e:16:d0:8c:96:94:ab:58:2e:63:54:89:
                    bb:a1:dc:71:5d:8b:86:f2:97:91:b4:21:1f:db:35:
                    a6:ef:21:75:cd:53:72:03:b2:d4:89:51:fc:aa:01:
                    05:b3:ff:fd:60:15:5f:7c:a9:b7:5f:e5:fd:31:3a:
                    86:5e:88:09:c4:c5:cf:53:6c:1a:09:a8:a7:d7:63:
                    16:4e:0d:38:49:c2:e3:fc:00:f8:56:1d:04:25:89:
                    7e:9b:23:79:0e:16:de:58:ce:6d:cb:4f:95:4b:cd:
                    82:21:7c:00:bb:72:fd:6b:f9:d9:1d:0f:3c:89:cc:
                    22:f4:43:d1:de:ea:6a:07:9f:42:18:af:08:20:43:
                    1c:7f:3c:be:dd:ba:ef:8e:8d:49:29:12:58:d3:27:
                    f4:41:53:1b:d4:4d:f6:d6:45:ba:d0:dc:53:82:43:
                    7a:c3:e6:c3:4f:6a:fc:37:e4:32:ad:86:28:10:38:
                    8c:48:d8:7c:cb:b5:66:78:95:f2:15:0e:d8:7f:4a:
                    43:63:29:1e:98:8e:52:ea:57:07:6f:bb:6f:e2:71:
                    6b:4c:f1:68:de:7e:2c:37:c4:aa:51:4c:4c:e7:68:
                    5c:89:fc:7d:85:15:c6:3c:dd:47:81:0b:5d:7f:3d:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4C:C0:09:D4:D3:9D:87:94:E7:04:A6:10:3B:54:4F:FE:0F:4F:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f99671a2-1fd5-3c5c-9b69-6357cdd44a3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:c7:b4:84:cd:4d:68:22:61:4e:de:62:89:c5:54:14:26:e8:
         7f:5f:f9:f8:54:2d:0c:b2:ae:f1:00:10:cc:5a:e3:12:93:57:
         32:a4:cc:54:54:4f:d9:c7:78:98:b1:5f:b0:7c:a3:2d:9c:08:
         a5:cf:b4:8f:6b:4e:2b:24:ab:10:b1:49:c7:75:77:02:6f:32:
         02:78:dd:f9:d7:86:ae:c4:30:cf:f5:f3:77:d7:c1:7d:d8:09:
         90:da:c4:bc:6e:76:64:94:7a:6a:01:c8:b4:e1:09:d7:57:bd:
         79:8d:96:d2:9e:c0:7a:a8:c4:25:d0:6d:ba:3e:ce:eb:39:52:
         48:94:87:81:42:68:9c:a0:88:3b:28:d7:ae:13:44:f6:7d:0e:
         ec:dc:2d:c5:7e:a3:6f:bb:da:bc:1b:79:22:00:d6:01:83:5b:
         c9:65:49:d3:ad:22:bd:cf:a8:8c:06:10:25:48:84:c8:a5:8a:
         c1:ea:ef:99:7d:8a:29:49:49:69:a4:b4:0c:b2:06:44:31:f3:
         35:e3:4f:1c:12:b0:37:25:fb:80:5d:b9:bd:b7:9b:12:49:67:
         f7:ba:1b:c2:f6:20:2c:7e:c2:6f:b9:97:c4:d5:21:ba:1b:7d:
         18:52:5c:8c:0f:37:ba:58:71:ae:37:f6:35:bf:61:ed:48:1d:
         c3:cf:70:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:08:56 2026 by rpki-client